Skip to main content
AI Data Engine

Investigate directories in AI Data Engine

Contributors netapp-dbagwell
PDFs

When you need to identify which directories are exposed to more users than intended, filter by permissions to find folders that are open to the entire organization. For example, a security administrator who sees exposed directories flagged on the dashboard can find all directories with org-wide access, review who holds read and write permissions, and create a policy to monitor for new exposures after each scan.

Before you begin

Find broadly accessible directories

Find directories that are open beyond the intended audience by filtering on permissions.

Steps

  1. From the AI Data Engine UI, select Investigation.

  2. Select the Directories tab.

    The table displays directory name (full path), data container, directory owner, directory type, and system.

  3. Select Add filter, then select Open permissions.

  4. Set the filter to Open to organization to surface directories accessible org-wide.

    The results table updates to show directories matching the permission criteria, including the last accessed date and permission status.

Review directory permissions

Confirm who has access to a directory and whether that access is intentional. Select a directory row to open the detail panel.

The detail panel shows the directory type, system, directory owner, and a permissions summary (for example, "Open to organization"). Select View permissions to see a breakdown of read and write access for each user or group with access to the directory.

Use this information to confirm whether the access level is intentional before creating a policy or escalating to the directory owner.

Save findings as a policy

After filtering to identify broadly accessible directories, save the criteria as a policy to monitor for new exposures after each scan cycle.

Steps

  1. After you apply your permission filters, select Create policy in the filter toolbar.

  2. Complete the policy form. Refer to Create a policy.

To control whether AI Data Engine scans permissions, refer to Configure data classification thresholds and access scanning.

To download the filtered results from the Directories tab, select Download.